Difference between revisions of "Active Directory CentOS"
Jump to navigation
Jump to search
Line 17: | Line 17: | ||
# realm deny --all | # realm deny --all | ||
realm permit -g 'MyAdministratorsGroup' | realm permit -g 'MyAdministratorsGroup' | ||
+ | ``` | ||
+ | |||
+ | # Issues | ||
+ | |||
+ | Group Cache Update Issues on 7 using Samba using winbind (sssd might be different) | ||
+ | ``` | ||
+ | #!/usr/bin/env bash | ||
+ | set -e | ||
+ | service winbind stop | ||
+ | rm /var/lib/samba/netsamlogon_cache.tdb | ||
+ | # rm /var/lib/samba/winbindd_cache.tdb | ||
+ | service winbind start | ||
+ | id -G -n my-tester@example.com | ||
+ | |||
+ | |||
+ | |||
+ | ssh -o PubkeyAuthentication=no -l "EXAMPLE\my-tester" myhost.example.com | ||
``` | ``` |
Revision as of 16:02, 4 May 2021
https://computingforgeeks.com/join-centos-rhel-system-to-active-directory-domain/
#!/usr/bin/env bash set -e ad_username=myuser ad_userpass=mypass ad_domain=example.com sudo dnf install -y realmd sssd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation authselect-compat realm discover $ad_domain echo $ad_userpass | realm join $ad_domain -U $ad_username # sudo authselect select sssd sudo authselect select sssd with-mkhomedir sudo systemctl restart sssd systemctl status sssd # realm deny --all realm permit -g 'MyAdministratorsGroup'
Issues
Group Cache Update Issues on 7 using Samba using winbind (sssd might be different)
#!/usr/bin/env bash set -e service winbind stop rm /var/lib/samba/netsamlogon_cache.tdb # rm /var/lib/samba/winbindd_cache.tdb service winbind start id -G -n my-tester@example.com ssh -o PubkeyAuthentication=no -l "EXAMPLE\my-tester" myhost.example.com